ON
← Back to feed
SBI data breach: Personal data of nearly 4,000 exposed, how major is the incident?
India🏛️ PoliticsCenter3 hr. ago

SBI data breach: Personal data of nearly 4,000 exposed, how major is the incident?

State Bank of India (SBI), India's largest public sector lender, confirmed that the personal data of approximately 4,000 customers was exposed on the dark web. The leaked information includes mobile numbers, addresses, dates of birth, names, email addresses, and loan-related details. SBI stated that it received alerts from cybersecurity agencies, including the Defence Cyber Agency and Cert-In, about the suspected exposure of customer data. During a preliminary review, the bank identified 3,897 customer records containing personally identifiable information (PII). While the bank claims there is no material impact on its operations, it is conducting a detailed investigation into the breach. The incident was initially reported on social media, where a group claimed to have access to over 3,75,000 records. Under India's new Digital Personal Data Protection Act, SBI could face penalties for failing to implement adequate security measures.

State Bank of India (SBI) confirmed on Wednesday that a cyberattack resulted in the exposure of 3,897 customer records containing personally identifiable information on the dark web. The bank disclosed the incident in a filing with the Securities and Exchange Board of India (SEBI). According to SBI, it received alerts on 16 October 2026 from its Threat Intelligence Service Provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In) regarding the suspected exposure of customer data on the dark web. During a preliminary review, SBI examined approximately 375,000 records found on the dark web and identified 3,897 records containing personally identifiable information (PII). These records included customer names, mobile numbers, dates of birth, email addresses, residential addresses, branch and customer information file identifiers, lead IDs, and metadata linked to loan and lead records. SBI stated that it immediately activated its cyber incident response and containment protocols. An independent cybersecurity agency empaneled by CERT-In was engaged to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise. The bank emphasized that the incident is not expected to have any material impact on its core business operations, financial performance, or business continuity. Core banking functions continue to operate normally without disruptions, and a detailed assessment is ongoing to implement necessary remedial and preventive measures. The incident follows increased regulatory attention on cybersecurity within the banking sector. India's banking regulator has been urging lenders to enhance their cybersecurity frameworks in response to rising threats against financial institutions. This comes amid growing concerns about cybersecurity risks, particularly with the emergence of artificial intelligence (AI) systems capable of exploiting security vulnerabilities. Last week, CERT-In issued an advisory highlighting that AI models had gained unauthorized access to confidential information held by several Indian organizations, though specific affected firms were not named. The breach initially surfaced through a social media platform post where a group claimed possession of 375,000 entries in CSV format and 2,722 PDF documents associated with SBI. While SBI has not officially commented on whether impacted customers have been notified, the bank has indicated that a detailed investigation is underway to confirm the authenticity and completeness of the exposed data, determine the source and extent of the exposure, and assess the associated risks to both customers and the bank. The incident highlights the evolving challenges in securing digital data, especially as new technologies such as AI introduce additional layers of complexity to cybersecurity strategies. As investigations progress, the focus will remain on understanding the breach's origins and ensuring robust protective measures are in place to prevent future occurrences.

How this report was made. Objective News wrote this report from 4 source articles, using AI-assisted synthesis under our methodology. It is our own text, not a copy of any single outlet. Read our methodology.

Responsible editor: Matej BašaSpotted an error? Report it

5 reports

India Today logoIndia TodayIndependentCenterFactual 97Objective 924 hr. ago
SBI confirms cyberattack, 3,897 customer records stolen and put on dark web

The State Bank of India (SBI) confirmed that a cyberattack resulted in the theft of 3,897 customer records, which were subsequently posted on the dark web. These records contain personal information such as mobile numbers, dates of birth, names, genders, email addresses, and residential addresses. SBI stated that the breach did not affect its core operations, financial performance, or business continuity. The bank received alerts from cybersecurity agencies including the Defence Cyber Agency and CERT-In on October 16. A preliminary analysis of over 375,000 records found on the dark web identified the specific 3,897 compromised records. SBI emphasized that it had initiated its cyber incident response protocols and is conducting further investigations to determine the source and extent of the breach. This follows previous reports of similar incidents, including a data leak at Bank of Baroda earlier this year.

Bias read (Center): The article presents factual information about a cyberattack affecting a major national institution without overtly favoring any political side. It includes quotes from the bank and mentions regulatory responses but avoids commentary or biased language.

Why factuality (97): The article accurately describes the SBI data breach, including the number of affected records (3,897), the type of data leaked, and the actions taken by the bank. It cites the bank's filing and provides additional context about the incident's impact on core operations.

Why objectivity (92): The article maintains a mostly neutral tone, though it slightly emphasizes the bank's assurance that core operations remain unaffected, which may subtly frame the incident as less severe than it might be perceived by customers.

The Indian Express logoThe Indian ExpressIndependentCenterFactual 96Objective 935 hr. ago
State Bank of India reports cyberattack involving nearly 3,900 customer records

State Bank of India (SBI) disclosed a cyberattack that led to the exposure of 3,897 customer records on the dark web. The affected data includes personal information such as names, mobile numbers, dates of birth, email addresses, residential addresses, and loan records. SBI stated that an independent cybersecurity firm is conducting an investigation into the breach. The bank claims the incident will not significantly impact its operations or financial performance. This follows increased regulatory attention on strengthening cybersecurity measures in India's banking sector due to rising threats against financial institutions.

Bias read (Center): The article presents factual information about a cyberattack affecting a major national institution without overtly favoring any political perspective. It focuses on the technical aspects of the breach, the response by SBI, and mentions regulatory efforts without taking a stance or using biased phr​

Why factuality (96): The article accurately reports the SBI data breach, including the number of affected records (3,897), the nature of the data leaked, and the bank's response. It references the bank's statement and provides context about increased regulatory attention to cybersecurity.

Why objectivity (93): The article remains largely objective, presenting the facts without overt bias. However, it slightly emphasizes the bank's claim that there will be no material impact on operations, which could be seen as a subtle attempt to downplay the severity of the breach.

The Indian Express logoThe Indian ExpressIndependentCenterFactual 95Objective 903 hr. ago
SBI data breach: Personal data of nearly 4,000 exposed, how major is the incident?

State Bank of India (SBI), India's largest public sector lender, confirmed that the personal data of approximately 4,000 customers was exposed on the dark web. The leaked information includes mobile numbers, addresses, dates of birth, names, email addresses, and loan-related details. SBI stated that it received alerts from cybersecurity agencies, including the Defence Cyber Agency and Cert-In, about the suspected exposure of customer data. During a preliminary review, the bank identified 3,897 customer records containing personally identifiable information (PII). While the bank claims there is no material impact on its operations, it is conducting a detailed investigation into the breach. The incident was initially reported on social media, where a group claimed to have access to over 3,75,000 records. Under India's new Digital Personal Data Protection Act, SBI could face penalties for failing to implement adequate security measures.

Bias read (Center): The article presents a factual report on a data breach at SBI, focusing on the technical aspects of the incident, the steps taken by the bank, and relevant legal frameworks. There is no overtly biased language, one-sided sourcing, or emphasis on particular political perspectives. The content remains

Why factuality (95): The article accurately reports the SBI data breach, citing the bank's stock filing and mentioning specific details such as the number of affected records (3,897), types of data leaked (mobile numbers, addresses, etc.), and the involvement of entities like Cert-In and the Defence Cyber Agency. The on

Why objectivity (90): The article maintains a neutral tone, presenting facts without overt bias or emotional language. It provides context about broader cybersecurity issues but avoids taking sides or making speculative statements beyond what is supported by the sources.

Deccan Herald logoDeccan HeraldIndependentCenterFactual: no official source document/info detectedObjective 953 hr. ago
State Bank of India reports cyberattack involving 3,897 customer records

State Bank of India (SBI) disclosed a cyberattack that led to the exposure of 3,897 customer records on the dark web. The breach was identified through alerts from the Defence Cyber Agency and CERT-In on 16 October 2026. The affected data includes personal information such as names, contact details, and loan records. In response, SBI activated its cyber incident response protocols and hired an independent cybersecurity firm to assess the situation. The bank claims there will be no significant impact on its operations or financial performance, and it is implementing corrective measures. This incident occurs against a backdrop of increased regulatory emphasis on strengthening cybersecurity in Indian banks.

Bias read (Center): The article presents factual information about a cyberattack on a major national bank, including the bank's response and regulatory context. There is no evident ideological framing, loaded language, or one-sided sourcing. The report remains neutral in tone and provides balanced details about the inc

Why factuality: no official source document/info detected

Why objectivity (95): The article remains objective throughout, presenting the facts without editorializing or showing favoritism toward either the bank or the victims. It quotes directly from the bank's statement and provides balanced coverage of the situation.

Business Standard logoBusiness StandardIndependent🔒CenterFactual: no official source document/info detectedObjective 903 hr. ago
SBI probes suspected dark web leak involving 3,897 customer records

The State Bank of India (SBI) is investigating a potential data breach where 3,897 customer records may have been leaked onto the dark web. The incident raises concerns about data security and privacy for SBI customers. Authorities are looking into the source of the leak and the extent of the exposure. This type of cyber threat highlights vulnerabilities in digital systems and could lead to increased scrutiny of cybersecurity measures by financial institutions.

Bias read (Center): The article reports on a cybersecurity incident involving a major national bank without apparent ideological framing, biased language, or selective sourcing. It focuses on the factual aspects of the investigation and does not take a stance on the issue.

Why factuality: no official source document/info detected

Why objectivity (90): The article presents the information neutrally, avoiding any biased language or opinionated commentary. However, due to its brevity, it offers less depth than other articles covering the same event.

How each side covered it

The same event, grouped by the political lean of the outlets covering it.

How each side covered it

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Covered around the world

The same event as reported in other countries.

Covered around the world

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Claims check

Key factual claims, and how many sources assert vs dispute each.

Claims check

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Keep the news honest.

ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.

Become a Supporter

Related stories